1"use strict";(self.webpackChunkAuthressKnowledgeBase=self.webpackChunkAuthressKnowledgeBase||[]).push([[3020],{3905:(e,t,o)=>{o.d(t,{Zo:()=>l,kt:()=>m});var n=o(67294);function r(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function a(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),o.push.apply(o,n)}return o}function i(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{};t%2?a(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):a(Object(o)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(o,t))}))}return e}function s(e,t){if(null==e)return{};var o,n,r=function(e,t){if(null==e)return{};var o,n,r={},a=Object.keys(e);for(n=0;n<a.length;n++)o=a[n],t.indexOf(o)>=0||(r[o]=e[o]);return r}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)o=a[n],t.indexOf(o)>=0||Object.prototype.propertyIsEnumerable.call(e,o)&&(r[o]=e[o])}return r}var u=n.createContext({}),c=function(e){var t=n.useContext(u),o=t;return e&&(o="function"==typeof e?e(t):i(i({},t),e)),o},l=function(e){var t=c(e.components);return n.createElement(u.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var o=e.components,r=e.mdxType,a=e.originalType,u=e.parentName,l=s(e,["components","mdxType","originalType","parentName"]),d=c(o),m=r,h=d["".concat(u,".").concat(m)]||d[m]||p[m]||a;return o?n.createElement(h,i(i({ref:t},l),{},{components:o})):n.createElement(h,i({ref:t},l))}));function m(e,t){var o=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var a=o.length,i=new Array(a);i[0]=d;var s={};for(var u in t)hasOwnProperty.call(t,u)&&(s[u]=t[u]);s.originalType=e,s.mdxType="string"==typeof e?e:r,i[1]=s;for(var c=2;c<a;c++)i[c]=o[c];return n.createElement.apply(null,i)}return n.createElement.apply(null,o)}d.displayName="MDXCreateElement"},7063:(e,t,o)=>{o.r(t),o.d(t,{assets:()=>u,contentTitle:()=>i,default:()=>p,frontMatter:()=>a,metadata:()=>s,toc:()=>c});var n=o(87462),r=(o(67294),o(3905));const a={hide_table_of_contents:!0,title:"How to estimate ROI on Security",description:"How to put a number on the cost of something that may not even happen? How to assign value to abstract and subjective constructs like \u201cbrand reputation\u201d or \u201ccustomer trust\u201d? How do we know if we\u2019re spending enough on security, and how to tell if we\u2019re spending too much? Assuming we have the budget for software security, where should we invest it? And in the absence of a budget, what can we do to obtain it?",image:"./post.png",image_alt:"How to estimate ROI on Security",video:!0},i=void 0,s={permalink:"/knowledge-base/articles/2024/06/18/estimating-roi-on-security",source:"@site/articles/2024-06-18-estimating-roi-on-security/index.md",title:"How to estimate ROI on Security",description:"How to put a number on the cost of something that may not even happen? How to assign value to abstract and subjective constructs like \u201cbrand reputation\u201d or \u201ccustomer trust\u201d? How do we know if we\u2019re spending enough on security, and how to tell if we\u2019re spending too much? Assuming we have the budget for software security, where should we invest it? And in the absence of a budget, what can we do to obtain it?",date:"2024-06-18T00:00:00.000Z",formattedDate:"June 18, 2024",tags:[],readingTime:.41333333333333333,hasTruncateMarker:!1,authors:[],frontMatter:{hide_table_of_contents:!0,title:"How to estimate ROI on Security",description:"How to put a number on the cost of something that may not even happen? How to assign value to abstract and subjective constructs like \u201cbrand reputation\u201d or \u201ccustomer trust\u201d? How do we know if we\u2019re spending enough on security, and how to tell if we\u2019re spending too much? Assuming we have the budget for software security, where should we invest it? And in the absence of a budget, what can we do to obtain it?",image:"./post.png",image_alt:"How to estimate ROI on Security",video:!0},prevItem:{title:"Why you should check your secrets into git",permalink:"/knowledge-base/articles/2024/07/02/devweek-why-you-should-check-your-secrets-into-git"},nextItem:{title:"Build, buy, or use open source",permalink:"/knowledge-base/articles/2024/06/14/build-versus-buy-versus-open-source"}},u={image:o(32682).Z,authorsImageUrls:[]},c=[],l={toc:c};
1function p(e){let{components:t,...o}=e;return(0,r.kt)("wrapper",(0,n.Z)({},l,o,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("div",{style:{display:"flex",justifyContent:"center"}},(0,r.kt)("iframe",{style:{borderRadius:"10px",width:"min(1000px, 100%)",height:534,border:"1px solid"},title:"How to estimate ROI on Security",src:"https://player.vimeo.com/video/940487124?quality=1080p",frameborder:"0",allow:"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share",allowfullscreen:!0})),(0,r.kt)("br",null),(0,r.kt)("p",null,"How to put a number on the cost of something that may not even happen? How to assign value to abstract and subjective constructs like \u201cbrand reputation\u201d or \u201ccustomer trust\u201d? How do we know if we\u2019re spending enough on security, and how to tell if we\u2019re spending too much? Assuming we have the budget for software security, where should we invest it? And in the absence of a budget, what can we do to obtain it?"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"Slides: ",(0,r.kt)("a",{parentName:"li",href:"https://docs.google.com/presentation/d/e/2PACX-1vTDTiXnoGl5gn2qSMWSGFis8viSpcUvu3OVRcO27zzfhKSvkVLUOu0hzsmAMeq8AE5lloSSupZwnAZ6/pub?start=false&loop=false&delayms=30000"},"Presentation Slides")),(0,r.kt)("li",{parentName:"ul"},"Conference: ",(0,r.kt)("a",{parentName:"li",href:"https://devopsdays.org/events/2024-zurich/program/dorota-parad/"},"DevOps Days Zurich 2024"))))}p.isMDXComponent=!0},32682:(e,t,o)=>{o.d(t,{Z:()=>n});const n=o.p+"assets/images/post-e463b72d8974cc5d10cc78bae3508a84.png"}}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.